N8N's Chat Trigger component is vulnerable to XSS

HIGH 8.8CVE-2025-56265 · GHSA-v2x8-97xq-8xrr · Published 08/09/2025 · updated 17/06/2026

In short

CVE-2025-56265 is a HIGH (CVSS 8.8) vulnerability affecting n8n (n8n), @n8n/n8n-nodes-langchain.
Chance of exploitation in the next 30 days (EPSS): 0.61%, higher than 49.3% of all vulnerabilities.
Fix: update to 1.107.0 or later.

Package	Affected versions	Patched versions
n8n n8n	`= 1.100.1= 1.101.1= 1.95.3`	No fix yet
@n8n/n8n-nodes-langchain npm	`< 1.107.0`	`1.107.0`

Description

An arbitrary file upload vulnerability in the Chat Trigger component of N8N v1.95.3, v1.100.1, and v1.101.1 allows attackers to execute arbitrary code via uploading a crafted HTML file.

NVD description

An arbitrary file upload vulnerability in the Chat Trigger component of N8N v1.95.3, v1.100.1, and v1.101.1 allows attackers to execute arbitrary code via uploading a crafted HTML file.

References

nvd.nist.gov/vuln/detail/CVE-2025-56265 · ADVISORY
n8n-io/n8n#18148 · WEB
n8n-io/n8n · PACKAGE
n8n-io/n8n release [email protected] · WEB
nikolas-ch/CVEs · WEB
nikolas-ch/CVEs · Exploit
nikolas-ch/CVEs · Exploit

More vulnerabilities in n8n

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

n8n

= 1.100.1= 1.101.1= 1.95.3

No fix yet

@n8n/n8n-nodes-langchain

npm

< 1.107.0

1.107.0

Description

An arbitrary file upload vulnerability in the Chat Trigger component of N8N v1.95.3, v1.100.1, and v1.101.1 allows attackers to execute arbitrary code via uploading a crafted HTML file.

NVD description

An arbitrary file upload vulnerability in the Chat Trigger component of N8N v1.95.3, v1.100.1, and v1.101.1 allows attackers to execute arbitrary code via uploading a crafted HTML file.

More vulnerabilities in n8n

See all →